Lucene search
K

16954 matches found

ATTACKERKB
ATTACKERKB
added 2025/01/22 1:15 p.m.1 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

7.5CVSS5.7AI score0.00349EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2025/01/22 1:15 p.m.5 views

AZL-55937 CVE-2025-0395 affecting package glibc for versions less than 2.35-9

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS7.1AI score0.00349EPSS
Exploits0References1
NVD
NVD
added 2025/01/22 1:15 p.m.11 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS0.00349EPSS
Exploits0References12
OSV
OSV
added 2025/01/22 1:15 p.m.10 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS7.2AI score
Exploits0References10
OSV
OSV
added 2025/01/22 1:15 p.m.5 views

AZL-55965 CVE-2025-0395 affecting package glibc for versions less than 2.38-11

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS7.1AI score0.00349EPSS
Exploits0References1
OSV
OSV
added 2025/01/22 1:15 p.m.1 views

UBUNTU-CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS7AI score0.00349EPSS
Exploits0References8
Cvelist
Cvelist
added 2025/01/22 1:11 p.m.16 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

0.00349EPSS
Exploits0References4
CVE
CVE
added 2025/01/22 1:11 p.m.746 views

CVE-2025-0395

Summary (CVE-2025-0395) : The GNU C Library (glibc) versions 2.13 to 2.40 contain a buffer overflow in the assert() failure path where the failure message and size information are not allocated sufficiently, potentially overflowing the heap if the message size aligns to a page boundary. Connected...

6.2CVSS7.6AI score0.00349EPSS
Exploits0References12
Vulnrichment
Vulnrichment
added 2025/01/22 1:11 p.m.5 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

7.6AI score0.00349EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2025/01/22 1:11 p.m.7 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS6.8AI score0.00349EPSS
Exploits0
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.3 views

GNU C Library 安全漏洞

The GNU C Library is an open source, free C language compiler from the GNU community released under the LGPL license. GNU C Library suffers from a buffer overflow vulnerability that stems from not allocating enough space for assertion failure message strings and size information when the assert...

7.5CVSS6.7AI score0.00349EPSS
Exploits0References8
NVD
NVD
added 2025/01/21 9:15 p.m.9 views

CVE-2024-57360

https://www.gnu.org/software/binutils/ nm =2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: nm --without-symbol-version function...

5.5CVSS0.00247EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/21 12:0 a.m.10 views

CVE-2024-57360

https://www.gnu.org/software/binutils/ nm =2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: nm --without-symbol-version function...

7.6AI score0.00247EPSS
Exploits0References1
CVE
CVE
added 2025/01/21 12:0 a.m.90 views

CVE-2024-57360

CVE-2024-57360 affects GNU Binutils up to version 2.43, specifically the nm --without-symbol-version function, with Incorrect Access Control allowing local exploitation. The issue is documented across multiple advisories (EulerOS/binutils entries and related NASL notes) and is tied to a local att...

5.5CVSS7AI score0.00247EPSS
Exploits0References1
OSV
OSV
added 2025/01/17 2:7 p.m.3 views

OESA-2025-1042 gcc security update

The gcc package contains the GNU Compiler Collection version 12. You'll need this package in order to compile C code. Security Fixes: DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in...

4.8CVSS7AI score0.00666EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/01/10 12:0 a.m.4 views

PT-2025-3866

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.13 through 2.40 Description The issue is related to the assert function in the GNU C Library, which fails to allocate sufficient space for the assertion failure message string and size information. This may lead to a...

7.8CVSS7.1AI score0.00349EPSS
Exploits0References78
0day.today
0day.today
added 2025/01/09 12:0 a.m.614 views

ABB Cylon Aspect 3.08.02 uploadDb.php Remote Code Execution Vulnerability

ABB Cylon Aspect version 3.08.02 suffers from an authenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through the contents of an uploaded .db file, which is passed to the copyFile.sh script. Although the filename is sanitized, the...

9.3CVSS9.9AI score0.02846EPSS
Exploits10
RedhatCVE
RedhatCVE
added 2025/01/08 2:0 p.m.8 views

CVE-2024-56738

A flaw was found in GRUB2. Affected versions of GRUB2 do not use a constant-time algorithm for grubcryptomemcmp, which can allow side-channel attacks...

6.5CVSS5.2AI score0.00383EPSS
Exploits0References4
Broadcom
Broadcom
added 2025/01/08 12:0 a.m.15 views

Brocade ASCG Vulnerability Disclosures

Brocade Security Advisories posted on May 19, 2026 CVE addressed in ASCG 3.4.0a CVE-2024-24785, CVE-2025-61729, CVE-2025-65637 Security updated provided in Brocade ASCG 3.4.0b for container-tools PSIRT Risk: Medium https://support.broadcom.com/external/content/SecurityAdvisories/0/37500...

9.8CVSS8AI score0.07007EPSS
Exploits14
Tenable Nessus
Tenable Nessus
added 2025/01/07 12:0 a.m.16 views

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.8.1.6)

The version of AOS installed on the remote host is prior to 6.8.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.8.1.6 advisory. - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSiz...

9.8CVSS7.5AI score0.02203EPSS
Exploits3References14
Rows per page
Query Builder